The Norwegian Data Protection Authority recently closed a case involving the use of Google Analytics on European websites. The conclusion is that the use of Google Analytics has been illegal until now. But with new rules for transferring data to the US in place, future use of the tool may be legal.
Read more:
What is GDPR and how does it affect marketing and sales?
The Danish Data Protection Authority's advice for analysis and tracking on web pages
GDPR and privacy: What do the new rules mean for the transfer of personal data to the US?
The Norwegian Data Protection Authority: Google Analytics use has been illegal
NOYB (European Center for Digital Rights, founded by Max Schrems) filed a complaint against several European websites for the use of Google Analytics on the basis of Schrems II, which meant that, on a general basis, it was no longer permissible to transfer personal data out of the EEA. The Norwegian Data Protection Authority has now concluded: "Our conclusion is that when the website used Google Analytics, personal data was transferred to the USA in violation of the rules. In other words, the use of Google Analytics was illegal.”
Information from the Danish Data Protection Authority suggests that the conclusion will also be the same, regardless of whether Google Analytics 3 or 4 has been used.
Google Analytics is legal due to new rules transferring personal data to the USA
In July, new rules came in which make it easier to legally transfer personal data to the USA. American businesses that are certified under the new rules, such as Google, can therefore transfer personal data to the United States.
Guidance on analysis and tracking tools
The Norwegian Data Protection Authority has prepared a list of advice for businesses that use analysis tools on their websites. Disse rådene er ment å hjelpe virksomheter med å sikre at bruken av disse verktøyene overholder personvernreglene.
Although the use of Google Analytics was previously considered illegal, has new rules opened the way for the legal transfer of personal data to the USA. This marks an important change for European websites using this tool. However, it is important to continue to comply with the privacy rules and follow the advice of the Norwegian Data Protection Authority.
Do you want help with GDPR?
PS! We help businesses deal with GDPR and privacy whether you work in sales, marketing or customer service. Book a no-obligation chat if you are worried about how you handle this today.
David Aleksandersen
David Aleksandersen is Chief Revenue Officer at Spring Agency. He has over 25 years of experience in sales, marketing, and management, both nationally and internationally. David has a Computer Science degree from Østfold University College and is studying Digital Transformation at Oslo Met. Before joining Spring, he worked as a business advisor at MarkedsPartner, marketing manager at Dataton AB, and as CEO at Smart Simulation AS.
